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Abstract 

We give a definition of asymmetric universal entangling machine which entangles a system in an 
unknown state to a specially prepared ancilla. The machine produces a fixed state-independent 
amount of entanglement in exchange to a fixed degradation of the system state fidelity. We describe 
explicitly such a machine for any quantum system having d levels and prove its optimality. We 
show that a d^-dimensional ancilla is sufficient for reaching optimality. The introduced machine is a 
generalization to a number of widely investigated universal quantum devices such as the symmetric 
and asymmetric quantum doners, the symmetric quantum entangler, the quantum information 
distributor and the universal-NOT gate. 
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I. INTRODUCTION 



Entanglement is a fundamental notion of quantum theory, having no classical counterpart. 
A pure state of two quantum systems is called entangled if it is not a product of a state for 
one system and a state for another. This definition is similar to the definition of statistical 
dependence in the classical theory. However, entanglement implies stronger correlations 
between the observables of both systems than it is allowed by the classical statistical theory. 

The first machine generating entanglement was described by Schrodinger in 1935 in the 
very paper introducing the notion of entanglement Q]. In his famous gedankenexperiment 
Schrodinger describes a machine which produces entanglement between the states of a cat 
and a decaying nucleus placed inside a closed box together with a diabolic machine, which 
kills the cat if the nucleus decays. The nucleus is initially in a non-decayed state |2) and in 
one hour it has a probability of | to decay to the state |1) . If we denote the state of alive 
and dead cat \alive) and \dead) respectively, and the initial and final states of the diabolic 
machine \i) and |/) respectively, then in one hour the state of nucleus, diabolic machine and 
cat transforms (up to normalization) like 

|2) \i) \alive) — > |2) \i) \alive) + |1) |/) \dead) . (1) 

The state in the right hand side of Eq. (Q) is entangled since it is pure and is not a product. 
We see that the nucleus together with the diabolic machine act as "entangling machine" 
for the cat, because they produce entanglement between themselves and the cat. However, 
this machine works only if the initial state of the cat is "alive". Indeed, if we place a dead 
cat inside the box, then the transformation (under the natural assumption that the diabolic 
machine does not affect the dead cat) will be 

|2) \i) \dead) — > |2) \i) \dead) + |1) |/) \dead) , (2) 

and the states of nucleus and cat are not entangled. Thus we have found that the entangling 
machine proposed by Schrodinger is state-dependent, i.e. it produces entanglement for some 
input states and does not for others. 

All quantum devices used today for producing entanglement between quantum systems 
share this feature with Schrodinger's machine: they all require the quantum systems to be 
prepared in definite initial states. These states can be quite "natural", e.g. the vacuum 
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state of two sub-harmonics in the process of parametric down-conversion P|. Nevertheless, 
it is interesting from both fundamental and practical points of view to know if it is possible 
to design a state-independent entangling machine which generates equal non-zero amount of 
entanglement for any state of the incoming system. Such a machine would have fundamental 
importance because it would clarify the relation between the notions of "quantum state" 
and "quantum entanglement", i.e. if the local and non-local properties of quantum systems 
can be manipulated independently from one another. From the practical point of view such 
machine would have applications to preparation of entangled state of two systems in the 
case where the initial state of one of them is not fully known at the moment of entangling 
interaction. This situation is typical for eavesdropping in quantum cryptography and can 
be met in quantum computation 

Quantum ,„ach,nes geueratiug entanglement in a universal (input state-independent) 
way have been considered by Alber [3| and Buzek and Hillery Both approaches aim at 
entangling two similar systems (having the same number of levels) in either antisymmetric 

or symmetric way. The latter type of entangling interaction has been recently realized 
in an experiment ja]. In the present paper we develop an alternative approach which does 
not require two systems to be similar to one another (cf. cat and nucleus above). As a 
consequence, our approach cannot and does not impose any symmetry condition on the 
output, and the machine of our interest can be called asymmetric universal entangling 
machine (AUEM). As we will see later, to obtain a non-trivial machine we will need to 
impose an additional constraint, linking the machine output to its input. Other and deeper 

n ji 

differences between the approach of the present paper and that of Refs. H and 14 will be 
clarified in the next Sections. 

The paper is structured as follows. In Sec. II we give a definition of asymmetric universal 
entangling machine. In Sec. Ill we deduce the explicit form of a transformation entangling a 
(i-level system in an a priori unknown state to a d'^-level ancilla and prove its optimality. Sec. 
IV is devoted to different forms of representation of the introduced machine, in particular 
cases giving other universal machines discussed in the literature, in particular, the symmetric 



quantum entangler jj,!^, the symmetric 0,Q, ^ ^ JlO . 11 1 and asymmetric 3, 
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13| quantum 



doners, the quantum information distributor [lj| and the universal-NOT (UNOT) gate 



16|. In Sec. V we turn to the simplest case of two-level systems (qubits) and describe a 



quantum circuit realizing the universal entangling transformation. In the same section the 
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asymmetric entangler is compared to the symmetric one, introduced by Buzek and Hillery, 
and the differences are discussed. 



II. DEFINITION OF MACHINE 

Let us now define precisely the machine we are interested in. We consider a signal system 
5* having a state space Tig of d dimensions and initially prepared in an unknown state 
Another quantum system A with a state space T-La of da dimensions is called ancilla; it is 
initially prepared in a definite state \Blank). We define quantum entangling machine as a 
physical device which takes as input these two systems and produces as output two systems 
S' and A' with the same number of dimensions of state space d and da respectively. In 
the future we will often omit primes and call the output systems S' and A' "signal" and 
"ancilla" as well, though they are not necessarily the same physical objects which entered the 
machine. We demand for our machine that the joint state of signal and ancilla at the output 
is a pure state I^I/)^^, which generally is not a product of two local states, i.e. a state for 
S' and a state for A' . To obtain a universal (input state independent) quantum entangling 
machine we demand that the degree of entanglement contained in |^E')5^ is independent of 
the input signal state At this step we need to implement a quantitative measure of 

bipartite entanglement. Fortunately, for pure state there is a good measure of entanglement 

121, defined as von Neumann entropy of the signal system alone: 

E = -Tr{ps\og2ps} , (3) 

where ps is the density operator of the signal at the output of the entangling machine: 

Ps = TrA{\^),^,^m}. (4) 

The entanglement E defined in Eq. (3) varies within the limits < < logg d, with 
E = log2 d realized for maximally entangled systems and E = for statistically independent 
ones. Now the condition of universal entanglement can be formulated as follows: a machine 
should produce the same amount of entanglement E for any input signal state lip). However, 
this condition alone can be satisfied by a trivial machine with da = d, which discards the 
input and produces as output the maximally entangled state of signal and ancilla: 

^ d-l 



)e discarded. A natural measure of similarity of two quantum states is the so-called 
isl - In our case the fidelity between the signal output and the signal input is defined 



where \ilJk) s \4'k) a ^^^^ of orthonormal vectors in the state spaces of signal and 

ancilla respectively. The entanglement of the output is E = logg d and of course it does not 
depend on the input state which is simply discarded. The same argument can be applied to 
the antisymmetric entangler of Ref. (see discussion in Ref. Q]). To obtain a non-trivial 
machine it is necessary that the output state, but not the degree of its entanglement, be 
related in some way to the unknown input state of the signal. The most simple and natural 
way to do so is to demand some "similarity" between the output and the input of the signal 
system: the signal output should in some sense "resemble" the input, so that the latter 
cannot 
fidehty 
as 

i^ = (^|p5|^), (6) 

and we may formulate the condition of universal similarity as follows: a machine should 
change the signal system in such way that the fidelity of the signal output with respect to 
the signal input is constant for any input signal state 

Thus we define an AUEM as a physical device having as input systems S and A in states 
and \Blank) respectively and producing as output systems S' and A' in a pure state 
1^)57! such that both entanglement Eq. (jH)) and fidelity Eq. (jHl) are independent of the state 
I?/'). We suppose that the entanglement is non-zero and the fidelity satisfies ^ < F < 1. The 
fidelity equal to or below ^ is not interesting because in this case the output is not more 
similar to the input than the totally mixed state with the density matrix I/rf, where I is the 
unity matrix. We expect that E{F) will be a decreasing function of F, i.e. that we need 
to "pay" for the entanglement by a degradation of the signal state fidelity. The obvious 
limiting points are -E(^) = \0g2d (trivial machine with the output given by Eq. ^) and 
E{1) = (no interaction). 

The most important question now is if the machine defined in this way is possible to realize 
by physical means. There is a number of quantum machines which are defined by general 
demands imposed on the outputs and which proved to be "impossible", i.e. not allowed 
by the laws of quantum mechanics, for example the perfect cloning machine and the 
perfect universal-NOT gate A numbei_pf other machines proved to be "possible", e.g. 

loning machine phase- 



the universal (imperfect) cloning machine [6|, the asymmetric a 
covariant doners [2^, and the (imperfect) universal-NOT gate 3]- If 



AUEM would prove 



to be possible, another important problem would be to find the optimal machine, producing 
maximal degree of entanglement for a given degradation of the signal state fidelity. 



III. PROPERTIES OF OPTIMAL MACHINE 

Let us suppose that the entangling machine defined in the previous section is possible 
and analyze the properties of the optimal one. While deducing the properties of the optimal 
machine we will find its explicit form and thus prove its existence. 

A. Purity 

In the definition of the entangling machine we demanded that the output state of signal 
and ancilla is pure. Let us now show that if this state is mixed, entanglement is not greater. 
Suppose that the joint state of the signal and the ancilla at the output of the entangling 
machine is a mixed state psA- The entanglement of this state can be measured by such a 



measure as the entanglement of formation 



2l|, which is found in the following way. First 



we unravel the state psA^ i-e. represent it as a sum of pure states with some weights, then 
calculate the entanglement of each pure state according to Eq. (jS)) and take a weighted 
sum of them, which will give us the entanglement of that unravelling. The minimum of this 
quantity over all possible unravelling of a mixed state is called its entanglement of formation. 
For pure states it coincides with the entanglement given by Eq. Q. It has been proven that 
he entanglement of formation is the upper bound for all other measures of entanglement 



221. 



Let us denote the entanglement of formation of psA as E' . Now we wish to show that 
for the same output signal state ps = TtaPsa we can construct a machine producing not 
less entanglement than E' . The output state psA-, as any mixed state, can be purified on a 
larger state space: a second ancilla Z can be added and a pure state |A)g^^ can be found 
on the state space of the signal and both ancillas, such that psA = Trz {|A) (A|}. It can be 
easily proven from the convexity of von Neumann entropy that E' is not greater than the 
entanglement between S and AZ in |A)g^^ (see the second Lemma in Ref. 0]). It means 
that for any mixed output state psA we always can construct another entangling machine 
with a bigger ancilla and pure output lA)^,^^, which produces not less entanglement and 
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results in the same transformation of the signal state. 



B. Output state of the optimal machine 

Now we analyze the structure of the pure output state of our machine. As any bipartite 
pure state, it can be written in the form of Schmidt decomposition 

d 

k=l 

where {\4'k)syk = l,...,d} is an orthonormal basis in Hs, {|0a:)^,A; = l,...,d} is an or- 
thonormal set of vectors in Ha, whose dimensionality is da > d, and are some complex 
numbers (Schmidt coefficients), satisfying the normalization condition 

E|A.P = 1. (8) 

k=l 

We accept that the vectors are numbered so that |Ai| > IA2I > ... > \\d\- The input signal 
state can be decomposed in the basis {\4'k)s ; ^ = 1) d} cis: 

d 



J^CfclV^fc), (9) 



k=l 

where are some complex coefficients, satisfying the normalization condition 

d 



J]|cfc|2 = l. (10) 



k=l 



Now the fidelity, Eq. Q, and the entanglement, Eq. can be expressed as 

d 

F = Y,\X,\'\c,\\ (11) 



k=l 



E = i7(|Ai|MA2p,...,|A,p), (12) 

where 

d 

H{xi,X2, ...,Xd) = -^Xk\og2Xk, (13) 



k=l 



is Boltzmann's H-function. Now our task is to find such form of the output state which (i) 
maximizes E for given F and (ii) maximizes F for given E. 



We start with solving the first problem. Let us consider F and E as functions on the 
coordinate space V created by {lA^p} and {Ic^p}, satisfying the normalization conditions 
Eqs. (jHI), (fTUI) and the ordering of A's. Let us define on V a subspace Vq by |cip = 1. Now, 
for given F on Vq: |Aip = F and the entanglement is 

Eo = -Flog2 F + if (IA2P, IA3P, lArfp). (14) 

The H-function is maximal when all its arguments are equal. Let us denote by Vi the one- 
parameter subspace of Vo with IA2P = IA3P = ... = |Adp = (1 — |Aip) /{d — 1). On this 
subspace Eq reaches its maximum F™"^ = hd{F), where the function hd{F) is defined as 

ha{F) = -Flog, F-{l-F) log, (15) 

and has the meaning of maximum of the H-function over d arguments summing up to unity, 
with the fixed maximal argument F. This function is strictly decreasing for 1/d < F < 1, 
because its derivative h'^{F) = log, [{1 — F)/{Fd — F)] is strictly negative in this region. 
On the entire space V the relation |Aip > F holds (from Eq. (jlll) ) and for any given Ai, 
the entanglement is bounded above by the value /i^^dAip) (from the meaning of the latter). 
Since hd{F) is a decreasing function of F, it follows that E < /id(|Aip) < hd{F) = F^"^, 
i.e. E^^"-^ is the entanglement maximum for the given fidelity. 

Now we turn to the second problem. Let us fix the entanglement Ei satisfying < Ei < 
log2 (i. We define the fidelity Fi by equation hd{Fi) = Ei, which has a unique solution, 
since h(i{F) is strictly decreasing ow 1/d < F < 1. This fidelity corresponds to a point 
in the subspace Vi (see above). Let us prove that Fi is the fidelity maximum for the 
given entanglement. Suppose that there is a point on V, giving the fidelity F, > Fi and 
entanglement E,. The maximal value of E, is given by haiF,), as proven above. Since the 
function hd{F) is strictly decreasing onl/(i<F<l, it follows that maxlE,) < Ei, that is, 
the value Ei is unreachable for fidelity higher than Fi. This completes the proof. 

Summing up, we see that there is a one-parameter subspace (Vi), where both conditions 
(i) and (ii) are satisfied simultaneously. On this subspace {tp) = {ipi) and the output state 
can be written as 

fc=2 

where the phases of coefficients are absorbed by Both the fidelity F and the en- 

tanglement E = hd{F) of the state Eq. (fTB|) are independent of the input state lip), and 
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therefore, a machine transforming \il')s \Blank) into the state Eq. ()16p is an AUEM and 
an optimal AUEM. We still need to prove that such a machine exist. It will be done in the 
next subsections by deducing the explicit form of the necessary unitary transformation. 



C. Transformation of signal state 

Now we look how the optimal AUEM is "seen" by the signal system alone. For the signal 
the AUEM acts as a quantum channel, which transforms its state from a pure state 
to a mixed state ps- This transformation can be found by substituting Eq. into Eq. 

(jl}, which gives 

P5 = (l-7r.)|V^)(V^| + ^I, (17) 

where tt^ is connected to F by the relation F = 1 — vr^ + vTs/c?. The quantum channel defined 
by Eq. p7|l is called "depolarizing channel" and the parameter vr^ varying from to 1 is 
known as "depolarized fraction" . The depolarizing channel is typically taken as t 
point for the discussion of universal quantum machines, e.g. quantum doners jo, 
our approach it has been shown that this channel is optimal for our purpose. 



le starting 
12, 1^. In 



D. Generalized Bell states and generalized Pauli operators 

ized Bell basis 
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23|. Let us 



In future it will be very useful to implement the formalism of genera' 
and Pauli operators to systems with number of dimensions greater than 2 
consider two quantum systems X and Y having state spaces Tlx and ?iy respectively of d 
dimensions each. We denote by \i) x and |j)y, j = 0, d — 1, the orthonormal bases in Tlx 
and Tiy respectively. We introduce a set of d? generalized Bell (GB) states on Tlx ® Ti-y- 

^ d-l 

where the indices m and n take values from to c? — 1. Note that here and below the 
summation in all indices is taken modulo d. The states Eq. ()18|) are normalized to unity 
and mutually orthogonal, thus creating an orthonormal basis on Tix ® 'Hy- For d = 2 these 
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states coincide with the usual Bell basis of two qubits: 

l« = ^(|0)|0) + |l)|l)) = |<l'+>, (19) 

lV^oi) = ^(|0)|0)-|l)|l)) = |<|.->, (20) 

l« = ^(|0)|l) + |l)|0)) = |v&+>, (21) 

l^ii) = ^(|0)|l)-|l)|0)) = |^">. (22) 

We also introduce on each space Tlx and TIy a set of d? unitary operators, which we call 
generalized Pauli (GP) operators: 

d-l 

?7™,„ = ^e2-(W'^)|fc + m)(fc|, (23) 

fc=0 

where m and n again run from to rf — 1. Note that f/oo = I- The operators Eq. ()23|) satisfy 
the relation 

Um,nUk,l = Um+k,n+ie'^'^^^^''^'^^ (24) 



and therefore do not 



brm a group, but it can be shown that they are related to the so-called 



Heisenberg group j23[. For d = 2, GP operators are proportional to Pauli spin operators: 

[/o,i = |0)(0|-|l)(l|=a„ (25) 
f/i,o = |1)(0| + |0)(1| (26) 
f/i,i = |l)(0|-|0)(l| = -z(T,. (27) 

GP operators are connected to GB states by the following relations: 

(I ® f/m,n) IV-OO) = l^mn), (28) 
e-^^'^"'^/''^ {U^m,n ® I) I^OO) = li^mn) , (29) 

that is any of d"^ GB states can be obtained from \ipoo) by applying one of GP operators 
(and possibly a phase shift) locally to system X or Y alone. This important property will 
be used in the future. Another useful property of GP operators is: 

^J2^m,nPUln = ^Tr{p}, (30) 
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which can be deduced from Eq. using the identity 



^g2.i[0-fcWd] (31) 

n=0 

Yet another property of GP operators is: 

that is, GB states are eigenstates of operators Um,n ® Um,^n which describe simultaneous 
local transformations of systems X and Y. From Eqs. (j32j) . (j3ip we get 

{Um,n ® Um-n) \lpkl) = d^^kO^lQ |?/'oo) , (33) 

m,n 

or, taking into account that GB states create a basis on Tlx ® 'Hy- 

^{Um,n®Um,-n) = d'^l'ipOo) {-ipOol- (34) 
m,n 

E. Kraus representation 

Using Eq. (jHUj) we can rewrite the output state of the depolarizing channel Eq. (fTTj) in 



the so-called Kraus form 



2M- 



d-l d-l 
m=0 n=0 

where 

I «^o,o, m,n = 0,0, 
Km,n = < (36) 
bUm,n, m,n ^ 0,0, 

are Kraus operators and the parameters a and b determine their relative weights and are 
connected to the depolarizing fraction by the relations 

a = - TT, + 7r,/(i2, (37) 
b = ^Jd. (38) 

Kraus representation helps find the form of the output state of signal and ancilla, namely: 
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where {|0mn)} is any set of d'^ orthonormal vectors in the state space of ancilla. It is 
straightforward to verify that substituting Eq. (jH^ in Eq. (jH) gives Eq. (jSH). We see that 
we need only d"^ dimensions of ancilla to store the possible transformations of the signal 
state. Thus we can use for our ancilla a pair of d-level systems X and Y and identify the 
states {|0m,n)} as phase-shifted GB states on Ha = Hx ® Hy- 

u \ /e'^'lV'oo), m,n = 0,0, 

I0mn) = < , , , (40) 

1^ g2.i(mn/d)|^_^_^^^ m,n^ 0,0, 

where cp is some phase which will be used for the "fine tuning" of the overall system-ancilla 
transformation. 

Substituting Eqs. (HO)), (IHUj) into Eq. (jHUj) . using Eq. and having in mind that 

Uofi = I, we obtain 

X \^)s \i'oo)xY ' (41) 

where the upper index shows in which space an operator acts and for simplicity the identity 
operators are omitted. Applying Eq. to the last equation we get finally 

\^),^y = M\ij),\iJoo)xY: (42) 
where the operator M is defined as 

M = a + pd\^oo)g^g^{^oo\, (43) 
where the complex parameter a and the real parameter f3 are defined as 

a = ae'^P - b, (44) 
/5 = M = , (45) 



and satisfy the relation 



\a\^ + -Re{a}p + = 1, (46) 

(Jj 



following from Eqs. (jHTj), (jH)), The meaning of the parameter (3 is clear, it is the 
square root of the depolarizing fraction of the signal channel. The meaning of the parameter 
a will be clarified below. 
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F. Existence of AUEM 

Eq. ()42p allows us to find the explicit form of AUEM and thus prove its existence. 
At first glance, this equation shows us that we can use the state \'4'm) xy initial 
state of ancilla \Blank) and apply the transformation M to obtain the necessary output 
state. Unfortunately, the operator M, as defined by Eq. ()43|) is generally not unitary on 
Ti = Hs ® Ti-x ® Ti-Y and therefore does not correspond to a physical process. However, 
we could construct a unitary operator on H suitable for our needs if M would be unitary 
on a subspace W spanned by possible input states of the machine, namely the states of the 
form \k)g \ipoo)xY^ where {1^)^ ,k = 0, d — 1} is some basis in Hs- Let us verify this fact. 
From Eqs. ^ we find: 

M \k)s \^oo)xY = " 1^)5 l^oo)xy + \^oo)sx l^)y • (47) 

Let us denote the subspace spanned by vectors given by Eq. (jTfj) as W'. We can easily 
calculate with the help of Eq. ()46p 

^^(^ool M^M \iJoo)xY = ^^i^ (48) 

that is M is unitary on W as required. It means that the orthonormal set of d states on W 
is transformed into an orthonormal set of d states on W" . We can define a transformation 
Um'- 'H — > Ti so that it acts as M on W and transforms an orthonormal set oi d^ — d states 
on 7i \ W into an orthonormal set on 7i \ W'. This transformation maps one basis on H. 
onto another and therefore is unitary and realizable by physical means. 

Thus we have proven the existence of AUEM and have found, that the optimal machine 
is realized by restricting our ancilla to a pair of d-level systems X and F, preparing its 
input state in the GB state \'4'm) xy ^"^^ applyi^ig to the signal and ancilla the unitary 
transformation Um^ constructed as described above. 

G. Uniqueness 

How unique is the described optimal machine? Other forms of the optimal AUEM can be 
connected only with other Kraus representations of the depolarizing channel and different 
ways of identification of the states \(j)mn) in the state space of ancilla. It is known that 
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different sets of Kraus operators are connected by a unitary transformation [2^, that is, if 
we find operators Kfj,^^ such that 

then 

^^1,11 ^ ^ ^ ^ ^ ^umn-^ m,n (^^) 
r?i=0 n=0 

where A^j^m„ are elements of a unitary matrix (pairs (/ii/) and (mn) being considered as two 
indexes). Eq. (jmjl leads us to the output state 

where I'i?;^;^) is an orthonormal basis on Tlx ® 'Hy- Substituting Eq. (I^Uj) into Eq. and 
comparing the result with Eq. we find 

d-l d-1 

|0mn) = X] X] ^fiumn l^^ti.), (52) 
^=0 u=Q 

that is, any other form of Kraus representation of the depolarizing channel can be reduced 
to that described in the previous subsection by a unitary transformation of ancilla state 
space. Different ways of identification of states \4>mn), which form an orthonormal basis on 
T-Ca, are also connected to one another by a unitary transformation on this space. Note that 
different values of also can be obtained by unitary transformations of ancilla. Thus, up 
to a unitary transformation on Tix ® Ti-y, there is only one optimal AUEM for any given 
fidelity F. 



IV. REPRESENTATIONS OF AUEM 



In the previous section we have solved a mathematical problem of existence and unique- 
ness of AUEM, namely we have found the form of optimal AUEM unique up to a unitary 
transformation of the ancilla state space. The transformation of Tix ® Tiy may mix the 
states of the two systems X and Y composing the ancilla and change the form of the inter- 
action between the signal system and the ancilla. When looking for a physical realization of 
the machine of our interest, we may find some forms of states and interactions more "handy" 
than others, so it seems to be very interesting to investigate different representations of the 
optimal AUEM corresponding to different choices of the ancilla transformation. 
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A. Standard representation 

First we summarize the results of the previous section and describe the representation of 
the optimal AUEM which will serve as the starting point for considering the transformations 
of the ancilla state space. 

At the input of the machine we have three li-level systems: S, X and Y. For each system 
we define the "standard" basis Bf {\k)-,k = 0,...,d— 1}, where i = S,X,Y. The signal 
is initially in an unknown state We prepare the systems X and y in a maximally 

entangled state, which is the \ipoo)xY state in the basis BxBy- We perform a unitary 
transformation Um of all three systems, which acts on the input state as the operator M 
defined by Eq. (j43|) in the basis BgBx- As a result we obtain the transformation, which in 
the basis BsBxBy is written as 

l^)s \^oo)xY — ' " \^)s \^oo)xY + \i^oo)sx \^)y ' (53) 
with complex a and real j3 satisfying Eq. ()46p . 



B. Covariance 



Let us suppose that instead of basis Bg we wish to use another basis in Tis, say B'^: 
{V \k)g ,k = 0, ...,d — 1}, where V is some unitary transformation on Tis- This situation 
can be met in quantum cryptography 25, 2^, where the eavesdropper may use the AUEM 
for intercepting the secret message (signal). In the majority of quantum cryptographic 
protocols, e.g. BB84 j^l, after the transmission of quantum data a set of vectors is an- 
nounced from which the transmitted state \'4')s been chosen. When calculating the 
amount of intercepted information it is natural to use the basis in Tis comprising this set. 
The question arises if we can choose the corresponding bases in Hx and Hy so that the 
form of transformation given by Eq. remain unchanged? To find the answer we note 

the remarkable property of the \'ipoo)sx state, namely its invariance under the simultane- 
ous change of bases of systems 5* and X to bases B'^: {iCfc)^ = V \k) , k = 0, d — 1} and 
^x- {\Ck)x = V* \k) , k = 0, d — 1} where V is a. unitary operator and V* is its complex 
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conjugation in the basis Bx- Indeed, expressing \4'oo)sx basis we find 

m,n 

~ ^ ] '^kmVkn \Cm) s \Cn) x 



I SX 



k,m,n 



= ■^Y.\^rn)s\Cm)x, (54) 

m 

where v^n = {k\V \ n) are matrix elements of the operator V in the Bs (Bx) basis, satisfying 
the unitarity relation 

^vl^'Vkn = Smn- (55) 
k 

It follows from Eq. that if we apply transformation V to the bases Bs and By and 
transformation V* to the basis Bx, then in the new bases the states \'ipoo)sx \i'oo)xY 
will preserve their form, and the entire transformation Eq. will remain invariant. 

Alternatively, we can express this property as covariance of the output state \'^)sxy with 
the input state \'ip)g, namely if we have the state U at the signal input, we get the state 
U ®U* ®U \^) sxY output, where U is any unitary transformation on a rf-level space 

and the asterisk again stands for complex conjugation in the Bx basis. Such a covariance 
follows from the invariance of the state |^o,o)5x under the transformation U ®U*: 

U®U* |^oo)5X = lV'oo)5x ' (56) 
which can be proven in the same way as Eq. (|54p . 

C. The local output states 

Now we calculate from Eq. (j^Hj) the output states of the three systems under consideration 
by tracing out the other two: 



Ps 



2 

lap + -Re{a}(3 
a 



)ss^'l'\+P'\ (57) 



px = '^Re{a}(3\r)xx(^*\ + M + (^'] (58) 



Py 



Uj 



'YY 



+ i^r^. (59) 
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We see that the output of system Y, like the signal output, represents a depolarizing channel 
with respect to the signal input, but characterized by the depolarizing fraction iTy = lap 
instead of vr^ = The output of system Y can be considered as an inaccurate copy, or 
"clone" of the signal system. The quality of the clone is optimal for some values of the 
parameters characterizing the AUEM, which are discussed below. 

We also note that the output of system X is the state {ip*) emerging from a depolar- 
izing channel with the depolarized fraction ir^ = |ap + This output realizes also a very 
important quantum machine - quantum conjugator. Generally, the map {ip) — ^ {"ip*) cannot 
be realized by physical means because it is not unitary. However such a transformation can 
be realized approximately as map \ip) — > p, with some fidelity Fconj = {4'*\p\i'*) < 1- 
Such a map has been recently analyzed for the quantum continuous variables [27]. In our 
case Fconj = |a + l3\'^/d] its optimal value will be found later on. For the case of even d the 
problem of conjugation is closely related to the problem of generating a state orthogonal to 
a given state, i.e. a map: \-ip) — > l^"*"); where \'ip'^) is a state orthogonal to \-ip)- Such a map 
is also possible only approximately, but if we could realize (approximately) the conjugated 
state lip*) then we could unitarily transform it into the state \'ip'^) = cTy^ CTy^ ■ ■ -crif ^^'"'^ 14'*)^ 
where the unitary rotation cr^' = —i \k) {l\ +z |/) {k\ is an analog of Pauli operator ay for two 
vectors of the Bx basis. It is easy to check that the obtained state is orthogonal to \ip). 



D. Asymmetric doner representation (ip = 0) 

The minimal value of TCy for fixed F (and therefore, a and b) is reached when = and a 
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is real. In this case the optimal AUEM acts as the asymmetric doner introduced by Cerf 
and the output of the system Y can be considered as the best possible "clone" of the signal 
input for the given value of the signal channel fidelity. With decreasing F the quality of clone 
increases. The relation between the depolarized fractions of the signal and the system Y is 
given by Eq. pUj) with real a and is exactly that for the asymmetric doner. The quantum 
information distributor, suggested in Ref. jl^, also realizing asymmetric cloning, provides 
a transformation defined by Eq. but with real parameters a and /3. 
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E. Symmetric cioner and UNOT gate. Symmetric entangier. Optimal conjugator 



Let us analyze the particular case of asymmetric cioner {ip = 0) where both clones (5" 
and Y') arise with the same fidelity with respect to the input signal state, i.e. where 
a = (3 = a/ d/ {2d + 2). In this case the AUEM works as the symmetric cioner, and the 
systems S' and Y' give two "clones" of the input S with the same fidelity F = {d+3) / {2d+2), 



which has been proven to be optimal 



l3- 

In the case where all systems S, X, and Y are qubits {d = 2) AUEM is closely related to 
the machine introduced by Buzek and Hillery Qj. It has been introduced first as a symmetric 
quantum cioner but it has proved later that it works at the same time as the optimal UNOT- 
gate ll5] and optimal symmetric entangier ^. This machine has been recently realized in 
an experiment |5i|. The only difference between the AUEM with = 0, a = (3 and the 
symmetric cioner is that the output X' of AUEM should be rotated by operator —icfy. In 
this case the output state of the machine is obtained from Eq. fl53j) with a = (3 = 1/ VS: 

= (|10) - |01)) + (|01) - |10)) 1^)] , (60) 

where |01) = |0) |1) and the kets are written in the order SXY in the basis BsBxBy- Now, 
using the invariance of the singlet state with respect to the change of basis, we can write it 
as |10) — |01) = IV'"'") — \'^'^) IV^), where = iUy \ip*) is a state orthogonal to \ip), and 
rewrite Eq. (plj) as 

l^out) = -^\^)s \^^)x l^)y + \{^^^^})sY (61) 

where |{'?/^, ■?/'-'"}) = 2~^^'^{\^jj) | ■?/'-'-) + \ip)) is the symmetric entangled state of two qubits. 
It has been shown that the machine producing the output state Eq. (IMl) is the optimal 

n Q 

symmetric entangier of 5* and Y the optimal symmetric cioner (outputs 5* and Y) [7|] 
and the optimal UNOT gate (output X) [15|. The latter has a fidelity Fjjnqt = 2/3, which 
is equal to the fidelity obtained by the optimal estimation of and preparation of jV'"'")- 

We return to the case of arbitrary d. It seems that complex conjugation is a natural 
generalization of UNOT operation to the case of (i-dimensional systems (see discussion in 
subsection IIVC|) . The fidelity of the "conjugated clone" X' is maximal for = and 
a = (3 (the same values as for the realization of the symmetric cioner), in which case 
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con] 



method 



2/ ((i + 1) which again is equal to the fidehty of the "estimation and preparation" 
l2q . It is unknown to us if the fidehty of conjugation reached by the AUEM is 



that maximal allowed by the laws of Nature. 



F. Minimal-interaction representation 

So far we have considered the representations of AUEM coinciding with other universal 
machines proposed in the literature. Now we introduce a new representation having the 
advantage of minimizing the interaction between the signal and ancilla. To this end we look 
for a possibihty to make unitary the operator M, defined by Eq. fHHj) . If it would prove to 
be possible, the entangling interaction could comprise the systems 5* and X only. 

It is easy to see that in the basis of GB states of systems S and X, M = diag{ae'^'^ — b + 
hd?, ae*'^ — b, ae^"^ — h}. For this operator to be unitary it is necessary and enough that 

\ae'^-h + h£\ = 1, (62) 
\ae'^-b\ = 1. (63) 

Both equations are satisfied at = (/Pq, where 

-2 

cos (/?o = —\ I —9. — ^ , 1 > (64) 

which is possible for 

F>1-^. (65) 

For example, for d = 2 the fidelity of the signal may take any value above for d = 3 the 




2' 

fidehty must be i| or higher. 

If the fidelity is high enough and the phase ip is chosen according to Eq. , the operator 
M on Tis ® Tix has the unitary form 

_ gjfOgiei^/jooXV'ool^ ^gg-^ 

where 
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In this case an optimal AUEM can be realized by implementing the interaction of systems 
5* and X only. This may be very important in some practical applications of AUEM, e.g. 
in quantum cryptography, where AUEM can be used for eavesdropping. 

Note, that different values of can be obtained by shifting the phase of the state \tljQQ)^y, 
and leaving the rest of Tix ® T^y intact. Therefore the unitary transformation realizing 
AUEM for F satisfying Eq. ()65|) and arbitrary (p can be written as 

It can be checked directly that this operator transforms the possible input states in exact 
accordance with Eq. ()53|) : 

X [(ae*'^« - b) \^oo)xY + 1^00)5^ \i^)Y] 

The minimal-interaction representation, given by Eq. ()69|) shows that an AUEM can be 
realized by sequential application of the same physical process first to systems S and X 
and then to the systems X and Y. Let us denote by G(v?) a quantum gate, acting on two 
(i-level systems A and B and shifting the phase of the GB state iV'oo)^^ by (p, while doing 
nothing for the other GB states. Then, up to irrelevant overall phase, the optimal AUEM 
can be realized by applying G(^) to S and X first and G{(f — (fo) to X and Y afterwards. A 
concrete example of such a quantum circuit for d = 2 will be discussed in the next section. 



V. ENTANGLING MACHINE FOR ONE QUBIT 

In this section we consider the simplest case of = 2, where all three systems S, X and Y 
are represented by two-level systems or "qubits" . We describe the quantum circuit realizing 
the optimal AUEM, compare the performance of the AUEM to that of the symmetric entan- 
gler and show how the AUEM can be applied to eavesdropping on a quantum cryptographic 
line. 
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A. Quantum circuit 



A quantum circuit realizing the optimal AUEM for one qubit can be build with the 
help of the two-qubit circuit depicted in Fig. ^ Horizontal lines represent qubits, vertical 
lines are two-qubit CNOT gates, and the squares and circles represent one-qubit rotations 
exp (— icr^^/S) and exp {—iay^/2) respectively by the specified angle ^. It is straightforward 
to verify that the four Bell states of the input qubits, defined by Eqs. ()19II22|) are transformed 
as follows: 



|$+) 
|$-> 



(71) 
(72) 
(73) 



i.e. they are not mixed with one another, each acquiring a phase shift in such a way that 
there is a phase difference of 6 between |$+) and the other three Bell states. It means that 
this circuit realizes the gate G(^) defined in the previous Section. This circuit alone realizes 
an optimal AUEM, if one of its entries is considered as input (qubit S) and the other (qubit 
X) is prepared in the Bell state l^"*")^^ with the third qubit (Y). The fidelity of the machine 
is connected to the parameter 6 by Eq. 









-e/2 










-6 


p- 


-< 




( 


p- 



FIG. 1: Quantum circuit realizing the gate G{9). The Bell states of two qubits are its eigenstates. 
It shifts the phase of state by 39/4 and the phases of the other three Bell states by —0/4. 
Two-qubit gates are CNOT gates, while one-qubit gates are rotations around z (squares) or y 
(circles) axis by the specified angle. 

Other representations of AUEM for one qubit can be obtained by concatenating this 
circuit with a similar one applied to the qubits X and Y and with 9 replaced hy ip — ipo (see 
Fig. 121). For example, the asymmetric doner [l^l inay be realized in this way by putting 
(f = 0. 
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XY 




SXY 



FIG. 2: AUEM for one qubit. S is the signal qubit in an unknown state. Qubits X and Y compose 
the 4-level ancilla and are initiahy prepared in the Bell state. The gate G{9) is shown in Fig. ^ 
The angles 9 and (^o are connected to the fidelity F by Eqs. with d = 2. is a free 

parameter. The output state is the pure entangled state of the three qubits. 



The symmetric entangler, acting at the same time as the symmetric doner and the 
universal-NOT gate, is realized by putting = 0, 6 = arccos(l/3). The circuit depicted 
in Fig. 121 can be compared to the circuits suggested for the universal (symmetric) cloning 
machine Q], where both ancillary qubits interact with the signal. Our scheme has the 
advantage of minimizing the number of qubits involved into the interaction with the signal 
system. 



B. Comparison with the symmetric entangler 

The performance of the optimal AUEM for one qubit, can be compared to that of the 



symmetric entangler of Buzek and Hillery 



^. The symmetric entangler (see subsection II V E|) 
is a machine having two qubits as input, one of them being the signal qubit in an unknown 
state Itp) and another one being a specially prepared ancilla. The output of the machine is a 
pair of qubits in a mixed entangled state obtained from Eq. (|UT|) by tracing out the system 
X: 

PSY = ^ (1^) |^^> + |^^> 1^)) ((^1 + (^1) 

+1 m m (^1 (^1 , (74) 

where the first vector in each pair of kets or bras is related to the signal qubit and the second 
one - to the ancillary qubit. 

Using the Wooters' method j^l we calculate the amount of entanglement of formation 
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Ql 1 \ 1 1 1 1 

0.2 0.4 0.6 0.8 1 

Entanglement 

FIG. 3: The output-to-input fidelity of the signal qubit as a function of the entanglement between 
the sij^nal qubit and the ancilla, at the output of AUEM (solid line). The symmetric entangler of 
Ref. Jt^ is shown by a cross. 

contained in the output state, which is the upper bound for all other measures of entangle- 
ment. The concurrence of the state Eq. ()74|1 is C = | and the entanglement of formation 
is equal to /i2 + VT^-C^)) ~ 0.19 ebits. The output-to-input fidelity of the signal 
qubit can be easily found equal to |. These quantities can be compared to the correspond- 
ing quantities of the optimal AUEM. For the price of disturbance | the AUEM produces 
E = /i2(|) = 0.65 ebits of entanglement, i.e. it is several times more effective than the 
symmetric entangler. It should be remembered also that the AUEM, in contrast to the 
symmetric entangler, allows us to vary the disturbance of the signal, finding the optimal 
trade-off between the fidelity and the entanglement (Fig. which is very important for 
such applications as eavesdropping in quantum cryptography. 
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C. Application of AUEM to eavesdropping 



Let us show that the optimal AUEM for one qubit reahzes the interaction necessary for 
the optimal eavesdropping in the so-called six state protocol of quantum cryptography. In 
this protocol the value of a bit is encoded into the state of a qubit S, chosen from three 
bases: the "rectilinear" one, created by two orthonormal vectors |0) and |1), the "diagonal" 
one, created by 

|0) = ^(|0) + |1)), (75) 
|1) = 4(|0)-|1))' (76) 



and the "circular" one: 



V2 



|0') = 4(|0)+.|1)), (77) 



|1') = 4(|0)-^|1)). (78) 



V2 
1 

The protocol of quantum key distribution is similar to BB84 :25j , the only difference is that 
three bases are used instead of two. The advantage of this scheme over BB84, is that the 
former is more secure against the eavesdropping. 



It has been shown [30| that the optimal strategy of individual eavesdropping to the six- 
state protocol is to attach to the qubit 5* a 4-level ancilla in some state \x) and to make the 
following transformation: 

|0) Ix) — Vf |0) \A) + VT^\l) \B) , (79) 
^v^|l)|C) + v^r^|0)|D), (80) 

where F, as usual, is the channel fidelity for the qubit S, and the four states in the ancilla 
state space are chosen so that {\A) , \C)} ± \B) ± \D), and Re {A\ C) = 2- l/F. 

If the optimal AUEM is used for entangling the qubit S to the ancilla, we obtain from 
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Eq. dSni) for = 2: 



|0)|$+>^|0) 



|1)|$+>^|1) 



;^|o),o).^,i),i) 
+^ ID ID 10) 
"^^'DID + ^|o) |o) 



(81) 



+^|o)|o)|D 



(82) 



where the kets are written in the SXY order. It is straightforward to verify that the four 
states of ancilla entangled with the states of the qubit S satisfy the demands imposed on 
the states 1^4), \B), |C), \D) for any value of (p. That is, the optimal AUEM can be used 
for optimal individual eavesdropping to the six state protocol of quantum cryptography. As 
we have seen, the entangling interaction can be designed in such way, that it comprise only 
two qubits of three, which may be a significant advantage in the practical applications of 
the eavesdropping techniques. 



VI. CONCLUSIONS 



We have given a definition of asymmetric universal entangling machine for a d-level sys- 
tem and have proven its existence. We have shown that such a machine requires a (i^-level 
ancilla and have found the transformation producing maximal possible entanglement for a 
given degradation of the signal system fidelity. The obtained machine could also be called 
"depolarizing channel purificator" , since it realizes the most general unitary transforma- 
tion of three ci-level systems acting as a depolarizing channel in the state space of one of 
them. Thus, this machine represents a generic quantum model for studying various universal 
quantum processes. 

It has turned out that this machine, AUEM, is a generalization to a wide variety of 
universal quantum machines suggested in the past years, comprising the symmetric and 
asymmetric quantum doners, the symmetric quantum entangler, the UNOT gate and the 
quantum information distributor. All these devices are particular realizations of AUEM 
for a definite decomposition of the ancilla state space into direct product of state spaces of 
two (i-level systems. This fact suggests that AUEM can be used in the same applications 
as the mentioned machines, having at the same time more degrees of freedom for tailoring 
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the necessary interaction. Besides, it may find additional applications in quantum infor- 
mation procession with partially known states and in eavesdropping to various quantum 
cryptographic protocols. 

The minimal-interaction representation of AUEM shows that for sufficiently high fidelity 
the entangling interaction requires a d-leve\ ancilla only, instead of a d'^-level ancilla typi- 
cally suggested. This result may simplify significantly the development of realistic universal 
quantum machines. 

From the fundamental point of view, the present paper shows that the knowledge of 
quantum state is not necessary for entangling any quantum system to another system (which 
is itself in a known state). Thus, the famous Schrodinger's gedankenexperiment can be 
modified in such a way that makes the initial state of the cat irrelevant. At the moment of 
box opening, the cat will be in a superposition of its initial state and all its other possible 
states jsil. 
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